Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/5n8NbUoiw-CQS_MNUIN0XCuurOA.roa
File: 5n8NbUoiw-CQS_MNUIN0XCuurOA.roa (raw, json)
Hash identifier: DswbIAqp8IauwEQhIMpNRkr4gAxQovQG1cW0/JOJwyE=
Subject key identifier: E6:7F:0D:6D:4A:22:C3:E0:90:4B:F3:0D:50:83:74:5C:2B:AE:AC:E0
Certificate issuer: /CN=a8b31004df135aa1a8b943033db14691b11a63dd
Certificate serial: 01940CF87D35E15854F85883019E093FF611
Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/5n8NbUoiw-CQS_MNUIN0XCuurOA.roa
Signing time: Sat 28 Dec 2024 11:13:18 +0000
ROA not before: Sat 28 Dec 2024 11:13:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3242
IP address blocks: 151.1.0.0/18 maxlen: 18
151.1.0.0/23 maxlen: 23
151.1.0.0/24 maxlen: 24
151.1.1.0/24 maxlen: 24
151.1.2.0/23 maxlen: 23
151.1.4.0/22 maxlen: 22
151.1.7.0/24 maxlen: 24
151.1.8.0/21 maxlen: 21
151.1.16.0/20 maxlen: 20
151.1.24.0/21 maxlen: 21
151.1.32.0/19 maxlen: 19
151.1.32.0/21 maxlen: 21
151.1.40.0/23 maxlen: 23
151.1.42.0/23 maxlen: 23
151.1.44.0/23 maxlen: 23
151.1.46.0/23 maxlen: 23
151.1.48.0/24 maxlen: 24
151.1.49.0/24 maxlen: 24
151.1.50.0/24 maxlen: 24
151.1.62.0/24 maxlen: 24
151.1.66.0/23 maxlen: 23
151.1.68.0/22 maxlen: 22
151.1.72.0/24 maxlen: 24
151.1.74.0/23 maxlen: 23
151.1.76.0/22 maxlen: 22
151.1.80.0/20 maxlen: 20
151.1.84.0/24 maxlen: 24
151.1.96.0/22 maxlen: 22
151.1.100.0/22 maxlen: 22
151.1.101.0/24 maxlen: 24
151.1.104.0/21 maxlen: 21
151.1.112.0/20 maxlen: 20
151.1.128.0/18 maxlen: 18
151.1.192.0/18 maxlen: 18
151.1.192.0/22 maxlen: 22
151.1.192.0/24 maxlen: 24
151.1.194.0/24 maxlen: 24
151.1.195.0/24 maxlen: 24
151.1.196.0/22 maxlen: 22
151.1.200.0/21 maxlen: 21
151.1.203.0/24 maxlen: 24
151.1.208.0/21 maxlen: 21
151.1.212.0/24 maxlen: 24
151.1.216.0/21 maxlen: 21
151.1.224.0/19 maxlen: 19
151.1.227.0/24 maxlen: 24
151.1.232.0/21 maxlen: 21
151.1.244.0/24 maxlen: 24
151.2.0.0/20 maxlen: 20
151.2.32.0/19 maxlen: 19
151.2.36.0/24 maxlen: 24
151.2.96.0/20 maxlen: 20
151.2.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0c:f8:7d:35:e1:58:54:f8:58:83:01:9e:09:3f:f6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd
Validity
Not Before: Dec 28 11:13:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e67f0d6d4a22c3e0904bf30d5083745c2baeace0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:7c:5e:7d:7b:10:32:82:b0:8e:24:a8:d0:
88:5e:29:a0:f5:52:31:22:7d:d5:41:32:b9:00:d1:
21:ee:9d:58:6c:81:30:20:db:ef:2f:55:d2:3f:64:
d9:9a:ef:b5:5b:12:21:fa:eb:b2:c8:99:51:ac:6b:
85:d4:15:13:22:e5:c5:21:9e:50:85:c8:fd:44:d3:
46:42:ea:07:cf:a9:af:d4:90:25:3f:6c:8b:bc:c2:
ec:a6:57:6c:25:8b:11:07:4c:db:df:e8:f4:8a:4b:
f8:6e:43:2d:6a:a6:9e:4e:9e:f9:48:03:7d:63:0b:
74:b0:0b:95:9b:c4:e1:3b:7a:4b:8e:20:5b:6c:ce:
8d:ca:68:8e:e4:93:80:54:96:17:5c:aa:58:ee:de:
79:6b:1e:55:ac:f7:1c:40:92:c8:fa:cd:2a:0e:7d:
83:67:11:69:8c:30:74:27:2e:64:b1:e9:bb:17:cc:
4e:cd:4f:11:24:1a:68:ab:b1:8d:d3:d6:57:8b:bf:
56:89:99:15:43:1f:c2:3b:f0:27:49:01:7c:89:64:
9e:7a:a4:65:6f:30:c9:fe:bb:03:b9:ba:49:d1:60:
a7:ba:4c:37:12:e3:c1:16:e9:33:76:e2:d8:96:7c:
5d:cd:a6:3d:54:48:17:d0:c6:ba:fc:02:f5:df:5c:
72:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7F:0D:6D:4A:22:C3:E0:90:4B:F3:0D:50:83:74:5C:2B:AE:AC:E0
X509v3 Authority Key Identifier:
keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/5n8NbUoiw-CQS_MNUIN0XCuurOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.1.0.0/18
151.1.66.0-151.1.72.255
151.1.74.0-151.2.15.255
151.2.32.0/19
151.2.96.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:33:65:3b:00:94:8a:28:3b:bd:43:77:06:5e:1e:ca:b9:e5:
22:18:f2:99:72:c4:02:79:73:92:a2:af:e0:6f:2f:21:0a:93:
83:4b:e3:80:9f:fc:f0:fb:8a:71:da:e3:57:a1:d7:df:ea:1c:
0a:9c:cd:06:02:83:8b:1f:bb:62:78:c0:bd:4f:6f:8c:e6:30:
c5:58:ee:81:78:08:ce:20:88:bb:37:d9:8d:8d:08:f9:6e:09:
b5:89:1a:27:c2:7d:51:bb:71:0a:9b:a9:15:0d:b7:39:5d:68:
79:7a:43:60:36:9a:98:82:17:41:03:ad:a1:42:83:b5:0b:ae:
0f:1b:f7:b3:ef:cb:ee:a9:56:69:40:d6:40:ac:d4:05:e8:32:
5f:71:4b:a2:21:52:fc:38:67:eb:76:ba:de:96:9e:c3:d8:51:
7e:51:cb:2e:38:d5:4b:63:3c:27:11:a7:a5:95:b2:45:7c:00:
06:6f:28:11:43:43:56:17:7c:72:47:69:31:49:13:11:87:5f:
d0:73:8e:9b:aa:7b:42:94:b1:2f:ef:fc:6a:65:c6:5f:2a:8d:
aa:3f:a4:63:0f:68:a8:94:c8:84:85:f5:95:00:d9:9e:9b:8b:
71:9f:e2:95:17:30:eb:5f:60:b7:3a:1e:15:f6:f5:32:8b:27:
13:b1:cf:13
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZQM+H014VhU+FiDAZ4JP/YRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YjMxMDA0ZGYxMzVhYTFhOGI5NDMwMzNkYjE0NjkxYjEx
YTYzZGQwHhcNMjQxMjI4MTExMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjdmMGQ2ZDRhMjJjM2UwOTA0YmYzMGQ1MDgzNzQ1YzJiYWVhY2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDV8Xn17EDKCsI4kqNCIXimg9VIx
In3VQTK5ANEh7p1YbIEwINvvL1XSP2TZmu+1WxIh+uuyyJlRrGuF1BUTIuXFIZ5Q
hcj9RNNGQuoHz6mv1JAlP2yLvMLspldsJYsRB0zb3+j0ikv4bkMtaqaeTp75SAN9
Ywt0sAuVm8ThO3pLjiBbbM6NymiO5JOAVJYXXKpY7t55ax5VrPccQJLI+s0qDn2D
ZxFpjDB0Jy5ksem7F8xOzU8RJBpoq7GN09ZXi79WiZkVQx/CO/AnSQF8iWSeeqRl
bzDJ/rsDubpJ0WCnukw3EuPBFukzduLYlnxdzaY9VEgX0Ma6/AL131xy1wIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFOZ/DW1KIsPgkEvzDVCDdFwrrqzgMB8GA1UdIwQY
MBaAFKizEATfE1qhqLlDAz2xRpGxGmPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQt
YzJhNDNiMDgwZDZmLzEvNW44TmJVb2l3LUNRU19NTlVJTjBYQ3V1ck9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQtYzJhNDNiMDgwZDZm
LzEvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQGlwEAMAwD
BAGXAUIDBACXAUgwDAMEAZcBSgMEBJcCAAMEBZcCIAMEBJcCYDANBgkqhkiG9w0B
AQsFAAOCAQEAnjNlOwCUiig7vUN3Bl4eyrnlIhjymXLEAnlzkqKv4G8vIQqTg0vj
gJ/88PuKcdrjV6HX3+ocCpzNBgKDix+7YnjAvU9vjOYwxVjugXgIziCIuzfZjY0I
+W4JtYkaJ8J9UbtxCpupFQ23OV1oeXpDYDaamIIXQQOtoUKDtQuuDxv3s+/L7qlW
aUDWQKzUBegyX3FLoiFS/Dhn63a63paew9hRflHLLjjVS2M8JxGnpZWyRXwABm8o
EUNDVhd8ckdpMUkTEYdf0HOOm6p7QpSxL+/8amXGXyqNqj+kYw9oqJTIhIX1lQDZ
npuLcZ/ilRcw619gtzoeFfb1MosnE7HPEw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:25:01 2025 by rpki-client